last executing test programs: 3m56.346418165s ago: executing program 3 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff8000}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e21ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010100"/375], 0x210) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1098c2, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 3m54.682522804s ago: executing program 3 (id=36): prlimit64(0x0, 0xe, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10003, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = timerfd_create(0x0, 0x80000) read(r0, &(0x7f0000000380)=""/149, 0x95) 3m50.924425347s ago: executing program 3 (id=46): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24040084) capset(&(0x7f0000000040)={0x20071026}, 0x0) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unshare(0x6020400) 3m49.179255613s ago: executing program 3 (id=53): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000050) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) 3m47.673662328s ago: executing program 3 (id=55): r0 = socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) 3m46.490933672s ago: executing program 3 (id=62): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x400) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000300)=0x4) bind$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x10, 0xc}, {0x0, 0xffff}, {0x4, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) bind$llc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3m31.180143669s ago: executing program 32 (id=62): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x400) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000300)=0x4) bind$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x10, 0xc}, {0x0, 0xffff}, {0x4, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) bind$llc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 11.081837925s ago: executing program 0 (id=894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 10.868094179s ago: executing program 0 (id=896): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="040e05003d", @ANYRES64], 0x7) socket$nl_generic(0x10, 0x3, 0x10) 10.578895441s ago: executing program 0 (id=900): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 9.641983843s ago: executing program 2 (id=905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 9.477206884s ago: executing program 0 (id=907): r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() setrlimit(0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000003080), 0x8000, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r6, 0x80045010, &(0x7f00000030c0)) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000003c0)=[{0x45, '\x00', @data=0x800, 0x4}, {0x5, '\x00', @data=0x2, 0x3}, {0x22, '\x00', @st={0x4, [{0x2, @uvalue=0x6}, {0x2, @uvalue=0xa}, {0x3, @svalue=0x61}, {0x2, @svalue=0x800000000d3}]}}]}) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000240)={0x16, &(0x7f00000000c0)=[{0x17, '\x00', @buffer={"7d9febc698fb8c74bacc508eb84c5b704579a245f9f4d1dfdf71f01b0cb54e6a", 0x20}, 0xa}, {0x1a, '\x00', @buffer={"b68db98798d7d58b30fcf85489fa4e9fa7ec3da8c0a08d1acf1fc6c5b9807bca", 0x20}, 0x3f}, {0x31, '\x00', @buffer={"17358a6a657b5069bf01745493d90f88311780eb084d6e4fb46ad27910c826c6", 0x20}, 0x7}, {0x23, '\x00', @buffer={"e81395b7fc7fac0c1d23183f1368389ed3c88bc4853d652e217b508acd08cc70", 0x20}, 0xc}]}) 9.451766011s ago: executing program 2 (id=909): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 8.544183524s ago: executing program 2 (id=918): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 8.264682782s ago: executing program 2 (id=920): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40000000, 0x0) 8.135464082s ago: executing program 4 (id=922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_macvtap\x00'}) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) creat(&(0x7f0000000300)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast2}], 0x30) 6.989721616s ago: executing program 2 (id=925): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 6.724005379s ago: executing program 4 (id=927): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 5.908416977s ago: executing program 4 (id=933): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) utimes(0x0, &(0x7f0000000000)={{0x6, 0xfffffffffffffffe}, {0x8, 0x4}}) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) 5.57005035s ago: executing program 4 (id=936): r0 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "b1975a9d", {0x1, 0x4, 0x4, 0xff, 0x2}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "115e4ecd", {0x3, 0x100, 0x0, 0x4, 0x3, 0x8, 0xd}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) 5.456895011s ago: executing program 0 (id=938): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000340)=[{0x6, 0x4a11, 0x0, 0x0}], 0x1}) 3.166894874s ago: executing program 4 (id=959): mknod(0x0, 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 2.925603207s ago: executing program 4 (id=961): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="100000000000000008000400d7ff0000c1001b0000000000"], 0x30}}, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020}, 0x2020) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x8}, {0x7, 0xf}, {0xffff, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 2.738839939s ago: executing program 2 (id=963): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) write$eventfd(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 1.851955527s ago: executing program 1 (id=965): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r1, 0x0, 0x0, 0x800, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/207, 0xcf}, {&(0x7f00000003c0)=""/9, 0x9}], 0x2}, 0x2000) 1.624742831s ago: executing program 0 (id=966): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x5) 1.547685732s ago: executing program 1 (id=967): r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() setrlimit(0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000003080), 0x8000, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r6, 0x80045010, &(0x7f00000030c0)) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000003c0)=[{0x45, '\x00', @data=0x800, 0x4}, {0x5, '\x00', @data=0x2, 0x3}, {0x22, '\x00', @st={0x4, [{0x2, @uvalue=0x6}, {0x2, @uvalue=0xa}, {0x3, @svalue=0x61}, {0x2, @svalue=0x800000000d3}]}}]}) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000240)={0x16, &(0x7f00000000c0)=[{0x17, '\x00', @buffer={"7d9febc698fb8c74bacc508eb84c5b704579a245f9f4d1dfdf71f01b0cb54e6a", 0x20}, 0xa}, {0x1a, '\x00', @buffer={"b68db98798d7d58b30fcf85489fa4e9fa7ec3da8c0a08d1acf1fc6c5b9807bca", 0x20}, 0x3f}, {0x31, '\x00', @buffer={"17358a6a657b5069bf01745493d90f88311780eb084d6e4fb46ad27910c826c6", 0x20}, 0x7}, {0x23, '\x00', @buffer={"e81395b7fc7fac0c1d23183f1368389ed3c88bc4853d652e217b508acd08cc70", 0x20}, 0xc}]}) 1.24466722s ago: executing program 1 (id=968): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.020443602s ago: executing program 1 (id=969): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) 455.484173ms ago: executing program 1 (id=970): mknod(0x0, 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 0s ago: executing program 1 (id=971): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000002000000fe8000000000000000000000030000bb0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000010000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101}}}], 0x20}, 0x400c814) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. [ 81.601105][ T5587] cgroup: Unknown subsys name 'net' [ 81.824572][ T5587] cgroup: Unknown subsys name 'cpuset' [ 81.897077][ T5587] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.784117][ T5587] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.282121][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.285436][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.289821][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.295480][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.298974][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.403208][ T4916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.418957][ T4916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.422529][ T4916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.424207][ T4916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.428778][ T4916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.501241][ T5601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.522752][ T5601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.557398][ T5601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.558828][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.559978][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.562380][ T5601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.571408][ T5601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.584267][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.613922][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.614428][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.644340][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.648137][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.655491][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.656684][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.679575][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.263851][ T819] cfg80211: failed to load regulatory.db [ 88.389436][ T4916] Bluetooth: hci0: command tx timeout [ 88.546723][ T4916] Bluetooth: hci1: command tx timeout [ 88.706570][ T4916] Bluetooth: hci3: command tx timeout [ 88.786613][ T4916] Bluetooth: hci2: command tx timeout [ 88.786799][ T4916] Bluetooth: hci4: command tx timeout [ 89.299805][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.300442][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.300618][ T5599] bridge_slave_0: entered allmulticast mode [ 89.302332][ T5599] bridge_slave_0: entered promiscuous mode [ 89.380203][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.380287][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.380398][ T5599] bridge_slave_1: entered allmulticast mode [ 89.383841][ T5599] bridge_slave_1: entered promiscuous mode [ 89.557054][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.614225][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.614504][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.614684][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.614790][ T5605] bridge_slave_0: entered allmulticast mode [ 89.616371][ T5605] bridge_slave_0: entered promiscuous mode [ 89.737358][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.737478][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.737652][ T5603] bridge_slave_0: entered allmulticast mode [ 89.740125][ T5603] bridge_slave_0: entered promiscuous mode [ 89.782560][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.782759][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.782894][ T5605] bridge_slave_1: entered allmulticast mode [ 89.784582][ T5605] bridge_slave_1: entered promiscuous mode [ 89.808357][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.808483][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.809105][ T5603] bridge_slave_1: entered allmulticast mode [ 89.811958][ T5603] bridge_slave_1: entered promiscuous mode [ 89.815591][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.815712][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.815868][ T5604] bridge_slave_0: entered allmulticast mode [ 89.819837][ T5604] bridge_slave_0: entered promiscuous mode [ 89.868654][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.868781][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.868892][ T5608] bridge_slave_0: entered allmulticast mode [ 89.870472][ T5608] bridge_slave_0: entered promiscuous mode [ 89.893927][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.894049][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.895030][ T5604] bridge_slave_1: entered allmulticast mode [ 89.899728][ T5604] bridge_slave_1: entered promiscuous mode [ 89.909251][ T5599] team0: Port device team_slave_0 added [ 89.934189][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.935509][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.936060][ T5608] bridge_slave_1: entered allmulticast mode [ 89.939766][ T5608] bridge_slave_1: entered promiscuous mode [ 89.979237][ T5599] team0: Port device team_slave_1 added [ 89.982153][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.022602][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.054421][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.073372][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.080289][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.114876][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.136847][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.137807][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.137818][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.137833][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.161262][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.205274][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.205291][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.205314][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.211506][ T5605] team0: Port device team_slave_0 added [ 90.235589][ T5603] team0: Port device team_slave_0 added [ 90.275015][ T5605] team0: Port device team_slave_1 added [ 90.294586][ T5603] team0: Port device team_slave_1 added [ 90.296312][ T5604] team0: Port device team_slave_0 added [ 90.319252][ T5608] team0: Port device team_slave_0 added [ 90.336727][ T5604] team0: Port device team_slave_1 added [ 90.354665][ T5608] team0: Port device team_slave_1 added [ 90.394927][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.394942][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.394966][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.420580][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.420596][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.420618][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.466394][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.466410][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.467900][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.476762][ T61] Bluetooth: hci0: command tx timeout [ 90.491556][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.491571][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.491594][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.493577][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.493588][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.493609][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.507645][ T5599] hsr_slave_0: entered promiscuous mode [ 90.509100][ T5599] hsr_slave_1: entered promiscuous mode [ 90.523635][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.523650][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.523672][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.543137][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.543151][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.543174][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.557798][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.557815][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.557837][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.636520][ T61] Bluetooth: hci1: command tx timeout [ 90.786596][ T61] Bluetooth: hci3: command tx timeout [ 90.866687][ T61] Bluetooth: hci4: command tx timeout [ 90.866724][ T61] Bluetooth: hci2: command tx timeout [ 91.474110][ T5605] hsr_slave_0: entered promiscuous mode [ 91.474966][ T5605] hsr_slave_1: entered promiscuous mode [ 91.475644][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 91.475720][ T5605] Cannot create hsr debugfs directory [ 91.534545][ T5603] hsr_slave_0: entered promiscuous mode [ 91.535354][ T5603] hsr_slave_1: entered promiscuous mode [ 91.535937][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 91.535964][ T5603] Cannot create hsr debugfs directory [ 91.590131][ T5604] hsr_slave_0: entered promiscuous mode [ 91.591027][ T5604] hsr_slave_1: entered promiscuous mode [ 91.591584][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 91.591604][ T5604] Cannot create hsr debugfs directory [ 91.610869][ T5608] hsr_slave_0: entered promiscuous mode [ 91.612231][ T5608] hsr_slave_1: entered promiscuous mode [ 91.613122][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 91.613144][ T5608] Cannot create hsr debugfs directory [ 92.505400][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.548222][ T4916] Bluetooth: hci0: command tx timeout [ 92.561568][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.572011][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.611979][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.613842][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.651604][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.677676][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.707663][ T4916] Bluetooth: hci1: command tx timeout [ 92.722260][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.835489][ T5603] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.866720][ T4916] Bluetooth: hci3: command tx timeout [ 92.871198][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.887059][ T5603] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.930798][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.934792][ T5603] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.946849][ T4916] Bluetooth: hci2: command tx timeout [ 92.946884][ T4916] Bluetooth: hci4: command tx timeout [ 92.954506][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.992292][ T5603] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.031604][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.181022][ T5605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.211217][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.224956][ T5605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.260336][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.278900][ T5605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.312737][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.337591][ T5605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.371217][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.510492][ T5604] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.550823][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.555270][ T5604] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.592017][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.603272][ T5604] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.645242][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.672037][ T5604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.700134][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.798319][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.881981][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.920738][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.924985][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.969784][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.975457][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.011215][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.028394][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.077709][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.095741][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.143196][ T3276] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.143348][ T3276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.251247][ T3376] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.251376][ T3376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.275336][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.410853][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.463347][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.482992][ T3276] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.483144][ T3276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.526346][ T2152] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.529153][ T2152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.611098][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.626585][ T61] Bluetooth: hci0: command tx timeout [ 94.674625][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.721215][ T2152] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.722267][ T2152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.783559][ T3290] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.783743][ T3290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.788984][ T61] Bluetooth: hci1: command tx timeout [ 94.879726][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.940483][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.946641][ T61] Bluetooth: hci3: command tx timeout [ 94.969669][ T3276] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.969803][ T3276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.026642][ T61] Bluetooth: hci2: command tx timeout [ 95.026679][ T61] Bluetooth: hci4: command tx timeout [ 95.047556][ T3376] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.047699][ T3376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.144790][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.249086][ T3276] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.249241][ T3276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.348534][ T3276] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.348678][ T3276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.962660][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.498021][ T5599] veth0_vlan: entered promiscuous mode [ 96.633263][ T5599] veth1_vlan: entered promiscuous mode [ 96.720980][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.870651][ T5599] veth0_macvtap: entered promiscuous mode [ 96.945500][ T5599] veth1_macvtap: entered promiscuous mode [ 97.015125][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.115915][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.159728][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.191975][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.249687][ T3185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.287952][ T3185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.292651][ T3185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.336847][ T3185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.448536][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.650446][ T5605] veth0_vlan: entered promiscuous mode [ 97.824657][ T5605] veth1_vlan: entered promiscuous mode [ 97.904429][ T5604] veth0_vlan: entered promiscuous mode [ 97.954746][ T3376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.954769][ T3376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.012416][ T5603] veth0_vlan: entered promiscuous mode [ 98.025916][ T5604] veth1_vlan: entered promiscuous mode [ 98.095260][ T5608] veth0_vlan: entered promiscuous mode [ 98.103733][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.103754][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.126951][ T5603] veth1_vlan: entered promiscuous mode [ 98.166390][ T5608] veth1_vlan: entered promiscuous mode [ 98.189907][ T5605] veth0_macvtap: entered promiscuous mode [ 98.237195][ T5605] veth1_macvtap: entered promiscuous mode [ 98.293821][ T5604] veth0_macvtap: entered promiscuous mode [ 98.316127][ T5604] veth1_macvtap: entered promiscuous mode [ 98.362445][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.364696][ T5603] veth0_macvtap: entered promiscuous mode [ 98.399956][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.402371][ T5603] veth1_macvtap: entered promiscuous mode [ 98.442597][ T5608] veth0_macvtap: entered promiscuous mode [ 98.475869][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.493299][ T3290] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.503810][ T3290] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.515184][ T5608] veth1_macvtap: entered promiscuous mode [ 98.530499][ T3290] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.557534][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.563216][ T3290] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.721456][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.752799][ T3276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.766840][ T3276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.820065][ T3276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.843118][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.881088][ T3276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.025707][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.188786][ T3376] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.214283][ T1116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.224857][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.285405][ T1116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.419382][ T1116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.453099][ T1116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.505117][ T1116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.593726][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.593749][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.611047][ T1116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.673118][ T1116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.048885][ T2152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.048917][ T2152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.337152][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.337173][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.599421][ T3185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.599442][ T3185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.776863][ T3433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.776884][ T3433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.865703][ T3433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.865733][ T3433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.194176][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.194217][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.737920][ T5816] netlink: 136 bytes leftover after parsing attributes in process `syz.0.10'. [ 101.775392][ T5817] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 102.855309][ T540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.855358][ T540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.098110][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.099356][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.227434][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.227637][ T5817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.228881][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.229279][ T5817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.290726][ T5817] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 104.586344][ T5819] tipc: Started in network mode [ 104.586378][ T5819] tipc: Node identity ded906028241, cluster identity 4711 [ 104.625205][ T5819] tipc: Enabled bearer , priority 0 [ 104.649303][ T5819] syzkaller0: entered promiscuous mode [ 104.649334][ T5819] syzkaller0: entered allmulticast mode [ 104.752278][ T5826] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 104.752310][ T5826] overlayfs: failed to set xattr on upper [ 104.752319][ T5826] overlayfs: ...falling back to redirect_dir=nofollow. [ 104.752327][ T5826] overlayfs: ...falling back to index=off. [ 104.752335][ T5826] overlayfs: ...falling back to uuid=null. [ 104.854959][ T5826] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 104.963063][ T5828] tipc: Resetting bearer [ 105.128380][ T5818] tipc: Resetting bearer [ 105.348208][ T5818] tipc: Disabling bearer [ 105.385766][ T5844] capability: warning: `syz.3.19' uses deprecated v2 capabilities in a way that may be insecure [ 105.902904][ T5848] netlink: 'syz.2.21': attribute type 10 has an invalid length. [ 105.954304][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.954838][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.062122][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.062259][ T5848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.062673][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.062768][ T5848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.076367][ T5848] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 106.155476][ T5851] netlink: 220 bytes leftover after parsing attributes in process `syz.1.23'. [ 106.155500][ T5851] tc_dump_action: action bad kind [ 107.735476][ T5860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.815396][ T5869] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 107.815428][ T5869] overlayfs: failed to set xattr on upper [ 107.815436][ T5869] overlayfs: ...falling back to redirect_dir=nofollow. [ 107.815444][ T5869] overlayfs: ...falling back to index=off. [ 107.815451][ T5869] overlayfs: ...falling back to uuid=null. [ 108.865088][ T5869] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 110.474032][ T5879] trusted_key: encrypted_key: insufficient parameters specified [ 110.906015][ T5889] netlink: 'syz.2.34': attribute type 10 has an invalid length. [ 110.933501][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.933813][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.193230][ T5902] netlink: 220 bytes leftover after parsing attributes in process `syz.0.38'. [ 112.193254][ T5902] tc_dump_action: action bad kind [ 114.251534][ T5919] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 114.251565][ T5919] overlayfs: failed to set xattr on upper [ 114.251574][ T5919] overlayfs: ...falling back to redirect_dir=nofollow. [ 114.251581][ T5919] overlayfs: ...falling back to index=off. [ 114.251588][ T5919] overlayfs: ...falling back to uuid=null. [ 114.380646][ T5926] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 115.875121][ T5938] netlink: 'syz.1.50': attribute type 10 has an invalid length. [ 115.907013][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.941081][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.994200][ T5941] netlink: 220 bytes leftover after parsing attributes in process `syz.2.52'. [ 117.994226][ T5941] tc_dump_action: action bad kind [ 118.848627][ T5964] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 118.873559][ T5964] overlayfs: overlapping lowerdir path [ 120.366499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.376487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.386488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.396482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.406485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.416485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.426493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.436481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.446481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.666468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.585481][ T5974] netlink: 'syz.2.64': attribute type 10 has an invalid length. [ 123.529790][ T5993] netlink: 220 bytes leftover after parsing attributes in process `syz.4.69'. [ 123.529862][ T5993] tc_dump_action: action bad kind [ 133.207121][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.227705][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.449775][ T6027] netlink: 'syz.0.77': attribute type 10 has an invalid length. [ 133.454326][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.455558][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.518271][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.518449][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.518825][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.518995][ T6027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.523715][ T6027] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 135.185046][ T4916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 135.220756][ T4916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 135.226003][ T4916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 135.244959][ T4916] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 135.245908][ T4916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.442246][ T6046] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 137.484626][ T61] Bluetooth: hci5: command tx timeout [ 139.966033][ T61] Bluetooth: hci5: command tx timeout [ 140.339759][ T6104] input: syz1 as /devices/virtual/input/input5 [ 142.596767][ T61] Bluetooth: hci5: command tx timeout [ 143.218194][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.218518][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.218744][ T6045] bridge_slave_0: entered allmulticast mode [ 143.222118][ T6045] bridge_slave_0: entered promiscuous mode [ 143.229569][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.229853][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.230041][ T6045] bridge_slave_1: entered allmulticast mode [ 143.232830][ T6045] bridge_slave_1: entered promiscuous mode [ 143.295365][ T6045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.323758][ T6045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.646735][ T6045] team0: Port device team_slave_0 added [ 143.677061][ T6045] team0: Port device team_slave_1 added [ 145.317506][ T61] Bluetooth: hci5: command tx timeout [ 145.406371][ T6045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.406389][ T6045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.407036][ T6045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.443280][ T6045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.443297][ T6045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.443320][ T6045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.243075][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 148.039726][ T61] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 148.097027][ T61] Bluetooth: hci1: Injecting HCI hardware error event [ 148.176874][ T61] Bluetooth: hci1: hardware error 0x00 [ 148.261405][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 148.308432][ T10] usb 2-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 148.308465][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.308485][ T10] usb 2-1: Product: syz [ 148.308500][ T10] usb 2-1: Manufacturer: syz [ 148.308514][ T10] usb 2-1: SerialNumber: syz [ 149.055918][ T6045] hsr_slave_0: entered promiscuous mode [ 149.118717][ T6045] hsr_slave_1: entered promiscuous mode [ 149.143109][ T6045] debugfs: 'hsr0' already exists in 'hsr' [ 149.143140][ T6045] Cannot create hsr debugfs directory [ 150.723591][ T10] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 152.000508][ T61] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 152.308798][ T6191] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 152.759788][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 152.943029][ T10] usb 2-1: USB disconnect, device number 2 [ 153.058805][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.291112][ T1093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.411541][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 154.842978][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 154.843012][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.843032][ T10] usb 2-1: Product: syz [ 154.843047][ T10] usb 2-1: Manufacturer: syz [ 154.843062][ T10] usb 2-1: SerialNumber: syz [ 155.440695][ T1093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.689388][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 155.692862][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 156.138409][ T6232] netlink: 168 bytes leftover after parsing attributes in process `syz.2.135'. [ 156.372531][ T1093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.054027][ T1093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.193316][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 159.453580][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 159.456365][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 159.457050][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 159.480429][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 160.481548][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 160.704956][ T10] usb 2-1: USB disconnect, device number 3 [ 161.150839][ T6045] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 162.650398][ T36] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 162.712546][ T6045] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.714201][ T6045] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.756650][ T6045] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.758027][ T6045] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.862848][ T6045] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.865290][ T6045] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 162.894648][ T36] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 162.894681][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.894694][ T36] usb 1-1: Product: syz [ 162.894702][ T36] usb 1-1: Manufacturer: syz [ 162.894710][ T36] usb 1-1: SerialNumber: syz [ 163.128871][ T36] usb 1-1: config 0 descriptor?? [ 163.199939][ T6045] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 163.622608][ T36] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 164.880948][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 165.164709][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 165.190308][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 165.190341][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.190361][ T10] usb 5-1: Product: syz [ 165.190375][ T10] usb 5-1: Manufacturer: syz [ 165.190389][ T10] usb 5-1: SerialNumber: syz [ 165.252210][ T10] usb 5-1: config 0 descriptor?? [ 165.303774][ T10] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 165.745125][ T10] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 165.854167][ T10] usb 5-1: USB disconnect, device number 2 [ 165.904638][ T36] usb 1-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 165.909460][ T36] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 165.909548][ T36] usb 1-1: media controller created [ 166.154010][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.960801][ T6321] mmap: syz.2.160 (6321) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 168.107835][ T36] i2c i2c-1: Added multiplexed i2c bus 2 [ 168.107864][ T36] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 168.131161][ T1093] bridge_slave_1: left allmulticast mode [ 168.131360][ T1093] bridge_slave_1: left promiscuous mode [ 168.185271][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.215202][ T36] usb 1-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 168.240522][ T36] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 169.786035][ T1093] bridge_slave_0: left allmulticast mode [ 169.786073][ T1093] bridge_slave_0: left promiscuous mode [ 169.786350][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.811725][ T36] DVB: Unable to find symbol r820t_attach() [ 172.479910][ T6368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.684613][ T36] usb 1-1: USB disconnect, device number 2 [ 176.498941][ T6432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.150438][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.258239][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.302330][ T1093] bond0 (unregistering): Released all slaves [ 177.424294][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.491272][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.660457][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 177.844488][ T6451] netlink: 'syz.4.209': attribute type 10 has an invalid length. [ 177.895925][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.209'. [ 177.899178][ T6451] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 177.909677][ T6454] bridge_slave_1: left allmulticast mode [ 177.909719][ T6454] bridge_slave_1: left promiscuous mode [ 177.909983][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.001823][ T6454] bridge_slave_0: left allmulticast mode [ 178.001850][ T6454] bridge_slave_0: left promiscuous mode [ 178.002038][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.443579][ T6454] bond0: (slave bridge0): Releasing backup interface [ 180.188941][ T6045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.345860][ T6504] netlink: 'syz.0.230': attribute type 10 has an invalid length. [ 180.349071][ T6504] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.349526][ T6504] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.405043][ T6506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'. [ 180.438841][ T6045] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.585602][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.585841][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.924122][ T2152] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.924276][ T2152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.371759][ T31] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 184.525854][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.525927][ T31] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 184.525950][ T31] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.525977][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.582019][ T31] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 184.582052][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.582072][ T31] usb 1-1: Product: syz [ 184.582086][ T31] usb 1-1: Manufacturer: syz [ 184.582099][ T31] usb 1-1: SerialNumber: syz [ 185.183380][ T31] usb 1-1: config 0 descriptor?? [ 185.718503][ T1093] hsr_slave_0: left promiscuous mode [ 185.784670][ T1093] hsr_slave_1: left promiscuous mode [ 185.787923][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.788016][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.821075][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.821104][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.880641][ T1093] veth1_macvtap: left promiscuous mode [ 185.880939][ T1093] veth0_macvtap: left promiscuous mode [ 185.881628][ T1093] veth1_vlan: left promiscuous mode [ 185.882048][ T1093] veth0_vlan: left promiscuous mode [ 186.555246][ T31] usb 1-1: Can not set alternate setting to 1, error: -71 [ 186.555296][ T31] synaptics_usb 1-1:0.0: probe with driver synaptics_usb failed with error -71 [ 186.593788][ T31] usb 1-1: USB disconnect, device number 3 [ 187.717437][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 188.812818][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 190.744026][ T6602] netlink: 136 bytes leftover after parsing attributes in process `syz.0.258'. [ 192.377961][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 193.813136][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 194.833525][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.921533][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.778142][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.828068][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.848996][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.850226][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.852431][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.126516][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 199.276555][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 199.293780][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.293841][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.293871][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 199.293893][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 199.293916][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.375074][ T31] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 199.375108][ T31] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 199.375130][ T31] usb 3-1: Manufacturer: syz [ 199.469816][ T31] usb 3-1: config 0 descriptor?? [ 200.406779][ T31] rc_core: IR keymap rc-hauppauge not found [ 200.406807][ T31] Registered IR keymap rc-empty [ 200.407519][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.427175][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.380770][ T4916] Bluetooth: hci4: command tx timeout [ 203.436615][ T61] Bluetooth: hci4: command tx timeout [ 203.521802][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 204.523543][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 205.353910][ T6709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.513890][ T61] Bluetooth: hci4: command tx timeout [ 205.677418][ T6699] netlink: 136 bytes leftover after parsing attributes in process `syz.2.283'. [ 205.745742][ T5262] 8021q: adding VLAN 0 to HW filter on device eth4 [ 205.820508][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 205.838803][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 205.856725][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 205.879078][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 205.896804][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 205.916605][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 205.937868][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 205.956600][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 205.977352][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 205.996641][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 206.055289][ T31] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 206.055316][ T31] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 206.197040][ T31] usb 3-1: USB disconnect, device number 2 [ 207.935765][ T61] Bluetooth: hci4: command tx timeout [ 208.906661][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 209.673513][ T31] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 209.673546][ T31] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 209.673559][ T31] usb 3-1: Product: syz [ 209.673567][ T31] usb 3-1: SerialNumber: syz [ 209.734905][ T31] usb 3-1: config 0 descriptor?? [ 209.919480][ T31] usb 3-1: can't set config #0, error -71 [ 209.966902][ T31] usb 3-1: USB disconnect, device number 3 [ 211.658670][ T6793] Zero length message leads to an empty skb [ 212.100300][ T5617] Bluetooth: hci3: command 0x0406 tx timeout [ 212.100348][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 212.100479][ T5617] Bluetooth: hci0: command 0x0406 tx timeout [ 214.231856][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 214.384192][ T6824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.221086][ T6845] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 215.221129][ T6845] overlayfs: failed to set xattr on upper [ 215.221134][ T6845] overlayfs: ...falling back to redirect_dir=nofollow. [ 215.221138][ T6845] overlayfs: ...falling back to index=off. [ 215.221142][ T6845] overlayfs: ...falling back to uuid=null. [ 215.364863][ T6848] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 219.026866][ T6572] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 219.181770][ T6572] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 219.181799][ T6572] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.239577][ T6572] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 219.239612][ T6572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.239632][ T6572] usb 1-1: Product: syz [ 219.239646][ T6572] usb 1-1: Manufacturer: syz [ 219.239661][ T6572] usb 1-1: SerialNumber: syz [ 219.382378][ T6572] usb 1-1: config 0 descriptor?? [ 219.411840][ T6572] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 219.411881][ T6572] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 219.924727][ T6885] bond0: (slave bridge0): Releasing backup interface [ 219.988048][ T6885] bridge_slave_0: left allmulticast mode [ 219.988192][ T6885] bridge_slave_0: left promiscuous mode [ 219.988477][ T6885] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.152181][ T6885] bridge_slave_1: left allmulticast mode [ 220.152225][ T6885] bridge_slave_1: left promiscuous mode [ 220.152516][ T6885] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.281532][ T6885] bond0: (slave bond_slave_0): Releasing backup interface [ 220.402809][ T6885] bond0: (slave bond_slave_1): Releasing backup interface [ 220.561140][ T6885] team0: Port device team_slave_0 removed [ 220.623658][ T6885] team0: Port device team_slave_1 removed [ 220.624548][ T6885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.624565][ T6885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.666029][ T6885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.666049][ T6885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.703049][ T6885] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 220.953016][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'. [ 221.042176][ T6897] 8021q: VLANs not supported on vcan0 [ 221.757347][ T6572] usb 1-1: USB disconnect, device number 4 [ 221.968832][ T1093] bridge_slave_1: left allmulticast mode [ 221.968872][ T1093] bridge_slave_1: left promiscuous mode [ 221.969484][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.254978][ T1093] bridge_slave_0: left allmulticast mode [ 222.255013][ T1093] bridge_slave_0: left promiscuous mode [ 222.255292][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.549637][ T6948] netlink: 168 bytes leftover after parsing attributes in process `syz.4.364'. [ 223.062384][ T6963] netlink: 68 bytes leftover after parsing attributes in process `syz.2.369'. [ 223.064170][ T6960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.646562][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 223.832141][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 223.832175][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.832195][ T10] usb 3-1: Product: syz [ 223.832216][ T10] usb 3-1: Manufacturer: syz [ 223.832231][ T10] usb 3-1: SerialNumber: syz [ 223.906516][ T5610] Bluetooth: hci3: command 0x0406 tx timeout [ 223.957017][ T10] usb 3-1: config 0 descriptor?? [ 224.211334][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 225.620328][ T6996] netlink: 68 bytes leftover after parsing attributes in process `syz.0.381'. [ 226.057188][ T7003] netlink: 168 bytes leftover after parsing attributes in process `syz.0.382'. [ 226.060229][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.308256][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.098776][ T1093] bond0 (unregistering): Released all slaves [ 227.302582][ T5610] Bluetooth: hci0: ACL packet for unknown connection handle 344 [ 227.305091][ T5610] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 227.306290][ T5610] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 227.332897][ T5610] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 227.665848][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 227.745618][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 227.781063][ T10] usb 3-1: USB disconnect, device number 4 [ 227.817943][ T5711] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 228.014357][ T5711] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 228.014390][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.014409][ T5711] usb 5-1: Product: syz [ 228.014423][ T5711] usb 5-1: Manufacturer: syz [ 228.014437][ T5711] usb 5-1: SerialNumber: syz [ 228.133609][ T5711] usb 5-1: config 0 descriptor?? [ 228.152557][ T5711] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 003 [ 228.342309][ T7037] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 228.342345][ T7037] overlayfs: failed to set xattr on upper [ 228.342353][ T7037] overlayfs: ...falling back to redirect_dir=nofollow. [ 228.342361][ T7037] overlayfs: ...falling back to index=off. [ 228.342368][ T7037] overlayfs: ...falling back to uuid=null. [ 228.457200][ T1093] hsr_slave_0: left promiscuous mode [ 228.475710][ T7037] overlayfs: failed to resolve './file1/file0': -2 [ 228.500015][ T1093] hsr_slave_1: left promiscuous mode [ 228.514381][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.541553][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.566674][ T5711] (null): failure reading functionality [ 228.805733][ T5711] i2c i2c-1: connected i2c-tiny-usb device [ 229.159333][ T5711] usb 5-1: USB disconnect, device number 3 [ 231.190330][ T7083] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 231.580450][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 231.667939][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 232.299323][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.299531][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.299776][ T6665] bridge_slave_0: entered allmulticast mode [ 232.305836][ T6665] bridge_slave_0: entered promiscuous mode [ 232.693022][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.693159][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.693396][ T6665] bridge_slave_1: entered allmulticast mode [ 232.700436][ T6665] bridge_slave_1: entered promiscuous mode [ 232.910125][ T6665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.941947][ T6665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.263705][ T6665] team0: Port device team_slave_0 added [ 233.295123][ T6665] team0: Port device team_slave_1 added [ 233.640042][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.640060][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.640087][ T6665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.693167][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.693183][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.693206][ T6665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.787857][ T6665] hsr_slave_0: entered promiscuous mode [ 237.955781][ T6665] hsr_slave_1: entered promiscuous mode [ 237.963974][ T6665] debugfs: 'hsr0' already exists in 'hsr' [ 237.964005][ T6665] Cannot create hsr debugfs directory [ 241.042685][ T7200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.457'. [ 242.387152][ T5262] 8021q: adding VLAN 0 to HW filter on device eth6 [ 247.164908][ T7253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.476'. [ 248.955217][ T7289] syz.0.489 uses obsolete (PF_INET,SOCK_PACKET) [ 248.959790][ T5610] Bluetooth: hci0: Unknown advertising packet type: 0x19 [ 248.959814][ T5610] Bluetooth: hci0: Unknown advertising packet type: 0x1f [ 251.501080][ T5719] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 251.667434][ T5719] usb 3-1: Using ep0 maxpacket: 16 [ 251.672962][ T5719] usb 3-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 251.672995][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.673014][ T5719] usb 3-1: Product: syz [ 251.673028][ T5719] usb 3-1: Manufacturer: syz [ 251.673040][ T5719] usb 3-1: SerialNumber: syz [ 256.165411][ T7375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.510'. [ 256.242808][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.242889][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.279570][ T5719] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 256.394579][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.451912][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.454959][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.482895][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.493795][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.035257][ T5719] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 257.123325][ T5719] usb 3-1: USB disconnect, device number 5 [ 257.340246][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.962783][ T61] Bluetooth: hci5: command tx timeout [ 259.211494][ T7417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.522'. [ 259.360957][ T5733] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 259.536970][ T7424] netlink: 136 bytes leftover after parsing attributes in process `syz.2.520'. [ 259.896485][ T5733] usb 1-1: Using ep0 maxpacket: 16 [ 259.942364][ T5733] usb 1-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 259.942396][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.942415][ T5733] usb 1-1: Product: syz [ 259.942429][ T5733] usb 1-1: Manufacturer: syz [ 259.942442][ T5733] usb 1-1: SerialNumber: syz [ 261.036864][ T61] Bluetooth: hci5: command tx timeout [ 263.108432][ T61] Bluetooth: hci5: command tx timeout [ 263.166860][ T5733] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 263.631558][ T7464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.239542][ T5733] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 264.336579][ T5733] usb 1-1: USB disconnect, device number 5 [ 264.634747][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.994014][ T7495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.543'. [ 265.202259][ T61] Bluetooth: hci5: command tx timeout [ 265.246510][ T5733] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 265.507366][ T5733] usb 1-1: Using ep0 maxpacket: 16 [ 265.518216][ T5733] usb 1-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 265.518250][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.518270][ T5733] usb 1-1: Product: syz [ 265.518285][ T5733] usb 1-1: Manufacturer: syz [ 265.518299][ T5733] usb 1-1: SerialNumber: syz [ 266.084222][ T5733] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 266.376557][ T5697] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 266.599100][ T5697] usb 3-1: Using ep0 maxpacket: 16 [ 266.620023][ T5697] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 266.620064][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.620084][ T5697] usb 3-1: Product: syz [ 266.620098][ T5697] usb 3-1: Manufacturer: syz [ 266.620112][ T5697] usb 3-1: SerialNumber: syz [ 267.102792][ T5697] usb 3-1: config 0 descriptor?? [ 267.180478][ T5697] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 267.239247][ T5697] usb 3-1: Detected FT232B [ 267.354483][ T5697] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 267.355078][ T5697] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 267.657227][ T5733] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 267.692970][ T5697] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 267.828141][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.048004][ T5733] usb 1-1: USB disconnect, device number 6 [ 268.405415][ T7550] netlink: 136 bytes leftover after parsing attributes in process `syz.4.558'. [ 269.557017][ T5697] usb 3-1: USB disconnect, device number 6 [ 269.964553][ T5697] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 269.965502][ T5697] ftdi_sio 3-1:0.0: device disconnected [ 270.042380][ T7576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.563'. [ 270.042409][ T7576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.563'. [ 271.996664][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 272.156480][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 272.195260][ T10] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 272.195294][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.195314][ T10] usb 1-1: Product: syz [ 272.195327][ T10] usb 1-1: Manufacturer: syz [ 272.195341][ T10] usb 1-1: SerialNumber: syz [ 272.286611][ T5719] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 272.309266][ T10] usb 1-1: config 0 descriptor?? [ 272.437475][ T5719] usb 5-1: Using ep0 maxpacket: 16 [ 272.485327][ T5719] usb 5-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 272.485424][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.485445][ T5719] usb 5-1: Product: syz [ 272.485458][ T5719] usb 5-1: Manufacturer: syz [ 272.485472][ T5719] usb 5-1: SerialNumber: syz [ 272.641173][ T10] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 272.641222][ T10] airspy 1-1:0.0: Could not detect board [ 272.641342][ T10] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 272.706897][ T10] usb 1-1: USB disconnect, device number 7 [ 273.398234][ T5719] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 274.929080][ T5719] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 274.963721][ T5719] usb 5-1: USB disconnect, device number 4 [ 275.076637][ T969] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 275.249040][ T969] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 275.249068][ T969] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.252830][ T969] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 275.252862][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.252882][ T969] usb 1-1: Product: syz [ 275.252896][ T969] usb 1-1: Manufacturer: syz [ 275.252911][ T969] usb 1-1: SerialNumber: syz [ 275.344812][ T969] usb 1-1: config 0 descriptor?? [ 275.358169][ T3185] bridge_slave_1: left allmulticast mode [ 275.358208][ T3185] bridge_slave_1: left promiscuous mode [ 275.363692][ T3185] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.386569][ T969] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 275.386633][ T969] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 275.543647][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.583880][ T3185] bridge_slave_0: left allmulticast mode [ 275.583917][ T3185] bridge_slave_0: left promiscuous mode [ 275.585784][ T3185] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.777389][ T7651] misc userio: Invalid payload size [ 275.777938][ T7651] misc userio: No port type given on /dev/userio [ 278.424922][ T3185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.561836][ T3185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.644351][ T3185] bond0 (unregistering): Released all slaves [ 278.727594][ T969] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 278.877360][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 278.890069][ T969] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 278.890095][ T969] usb 3-1: config 0 has no interface number 0 [ 278.897300][ T969] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 278.897329][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.897347][ T969] usb 3-1: Product: syz [ 278.897371][ T969] usb 3-1: Manufacturer: syz [ 278.897384][ T969] usb 3-1: SerialNumber: syz [ 278.948252][ T969] usb 3-1: config 0 descriptor?? [ 279.129758][ T969] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 279.129788][ T969] usb 3-1: selecting invalid altsetting 1 [ 279.129805][ T969] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 279.190227][ T969] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 279.194581][ T969] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 279.194641][ T969] usb 3-1: media controller created [ 279.344858][ T969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.380461][ T7646] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 279.539051][ T969] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 279.539120][ T969] zl10353_read_register: readreg error (reg=127, ret==-71) [ 279.539739][ T969] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 279.659486][ T969] usb 3-1: USB disconnect, device number 7 [ 280.006926][ T5719] usb 1-1: USB disconnect, device number 8 [ 280.493488][ T3185] hsr_slave_0: left promiscuous mode [ 280.526514][ T3185] hsr_slave_1: left promiscuous mode [ 280.533808][ T3185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.580040][ T3185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.546534][ T969] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 281.729643][ T969] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 281.729686][ T969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.729707][ T969] usb 5-1: Product: syz [ 281.729722][ T969] usb 5-1: Manufacturer: syz [ 281.729737][ T969] usb 5-1: SerialNumber: syz [ 281.837603][ T969] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 282.491170][ T5697] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 283.155527][ T5719] usb 5-1: USB disconnect, device number 5 [ 283.208659][ T3185] team0 (unregistering): Port device team_slave_1 removed [ 283.342661][ T3185] team0 (unregistering): Port device team_slave_0 removed [ 283.907372][ T5697] usb 5-1: Service connection timeout for: 256 [ 283.907400][ T5697] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 284.219647][ T5697] ath9k_htc: Failed to initialize the device [ 284.222955][ T5719] usb 5-1: ath9k_htc: USB layer deinitialized [ 285.018511][ T7816] misc userio: Invalid payload size [ 285.021352][ T7378] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.023830][ T7378] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.024072][ T7378] bridge_slave_0: entered allmulticast mode [ 285.066242][ T7378] bridge_slave_0: entered promiscuous mode [ 285.134615][ T7378] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.134753][ T7378] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.144121][ T7378] bridge_slave_1: entered allmulticast mode [ 285.187998][ T7378] bridge_slave_1: entered promiscuous mode [ 285.587718][ T7378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.665445][ T7378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.572571][ T7842] tipc: Enabled bearer , priority 0 [ 286.576032][ T7378] team0: Port device team_slave_0 added [ 286.603446][ T7378] team0: Port device team_slave_1 added [ 286.695116][ T7838] syzkaller0: entered promiscuous mode [ 286.695142][ T7838] syzkaller0: entered allmulticast mode [ 287.393024][ T7859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.405993][ T7842] tipc: Resetting bearer [ 287.555029][ T7378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.555048][ T7378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.555075][ T7378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.618193][ T7836] tipc: Resetting bearer [ 288.008533][ T7836] tipc: Disabling bearer [ 288.189095][ T7378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.189113][ T7378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.189141][ T7378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.219241][ T5719] tipc: Node number set to 1553466882 [ 288.615337][ T7378] hsr_slave_0: entered promiscuous mode [ 288.624522][ T7378] hsr_slave_1: entered promiscuous mode [ 288.625773][ T7378] debugfs: 'hsr0' already exists in 'hsr' [ 288.625800][ T7378] Cannot create hsr debugfs directory [ 288.663724][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 292.487313][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 292.661509][ T9] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 292.661538][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.705149][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 292.705182][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.705217][ T9] usb 1-1: Product: syz [ 292.705244][ T9] usb 1-1: Manufacturer: syz [ 292.705270][ T9] usb 1-1: SerialNumber: syz [ 292.815017][ T7911] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.853877][ T9] usb 1-1: config 0 descriptor?? [ 293.000875][ T9] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 293.000925][ T9] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 293.547416][ T7922] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 297.444126][ T5262] 8021q: adding VLAN 0 to HW filter on device eth6 [ 297.479870][ T969] usb 1-1: USB disconnect, device number 9 [ 297.903249][ T7976] IPv6: Can't replace route, no match found [ 299.547824][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 299.713898][ T9] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 299.713927][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.740494][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 299.740527][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.740565][ T9] usb 5-1: Product: syz [ 299.740580][ T9] usb 5-1: Manufacturer: syz [ 299.740594][ T9] usb 5-1: SerialNumber: syz [ 299.830590][ T9] usb 5-1: config 0 descriptor?? [ 299.873057][ T9] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 299.874277][ T9] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 303.208543][ T8022] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 303.221050][ T7988] bond0: (slave bond_slave_0): Releasing backup interface [ 303.390391][ T7988] bond0: (slave bond_slave_1): Releasing backup interface [ 303.508161][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 303.514400][ T7988] team0: Port device team_slave_0 removed [ 303.575966][ T7988] team0: Port device team_slave_1 removed [ 303.577937][ T7988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.577962][ T7988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.623137][ T7988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.623167][ T7988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.658840][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 303.664159][ T31] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 303.664190][ T31] usb 3-1: config 0 has no interface number 0 [ 303.684448][ T31] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 303.684478][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.684496][ T31] usb 3-1: Product: syz [ 303.684508][ T31] usb 3-1: Manufacturer: syz [ 303.684521][ T31] usb 3-1: SerialNumber: syz [ 303.707232][ T31] usb 3-1: config 0 descriptor?? [ 303.730881][ T7988] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 303.738705][ T31] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 303.738731][ T31] usb 3-1: selecting invalid altsetting 1 [ 303.738745][ T31] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 304.118157][ T31] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 304.118584][ T31] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 304.118642][ T31] usb 3-1: media controller created [ 304.135663][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.521730][ T31] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 304.521797][ T31] zl10353_read_register: readreg error (reg=127, ret==-71) [ 304.532898][ T31] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 305.146673][ T31] usb 3-1: USB disconnect, device number 8 [ 305.223233][ T5711] usb 5-1: USB disconnect, device number 6 [ 306.454923][ T8086] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 306.726776][ T6245] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 306.887506][ T6245] usb 3-1: Using ep0 maxpacket: 32 [ 306.890244][ T6245] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 306.890271][ T6245] usb 3-1: config 0 has no interface number 0 [ 306.902350][ T6245] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 306.902378][ T6245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.902396][ T6245] usb 3-1: Product: syz [ 306.902409][ T6245] usb 3-1: Manufacturer: syz [ 306.902421][ T6245] usb 3-1: SerialNumber: syz [ 307.100629][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 307.121791][ T6245] usb 3-1: config 0 descriptor?? [ 307.207680][ T6245] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 307.207711][ T6245] usb 3-1: selecting invalid altsetting 1 [ 307.207727][ T6245] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 307.246329][ T6245] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 307.246875][ T6245] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 307.246934][ T6245] usb 3-1: media controller created [ 307.368265][ T9] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 307.368293][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.394150][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 307.394182][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.394202][ T9] usb 5-1: Product: syz [ 307.394216][ T9] usb 5-1: Manufacturer: syz [ 307.394229][ T9] usb 5-1: SerialNumber: syz [ 307.409118][ T6245] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 307.500459][ T9] usb 5-1: config 0 descriptor?? [ 307.611280][ T9] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 307.611352][ T9] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 307.710524][ T6245] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 307.710588][ T6245] zl10353_read_register: readreg error (reg=127, ret==-71) [ 307.713988][ T6245] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 308.137185][ T8121] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 308.165197][ T7378] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 308.711142][ T7378] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.735425][ T7378] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 308.820812][ T6245] usb 3-1: USB disconnect, device number 9 [ 308.980434][ T7378] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 308.984262][ T7378] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 309.161996][ T7378] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 309.165483][ T7378] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 309.948990][ T7378] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 310.338177][ T6572] usb 5-1: USB disconnect, device number 7 [ 311.021144][ T8177] netlink: 68 bytes leftover after parsing attributes in process `syz.0.766'. [ 313.990549][ T7378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.386681][ T819] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 314.534389][ T7378] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.553481][ T819] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 314.553510][ T819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.579062][ T819] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 314.579095][ T819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.579116][ T819] usb 5-1: Product: syz [ 314.579130][ T819] usb 5-1: Manufacturer: syz [ 314.579145][ T819] usb 5-1: SerialNumber: syz [ 314.653172][ T819] usb 5-1: config 0 descriptor?? [ 314.706099][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.030805][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.487184][ T819] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 315.487262][ T819] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 316.325126][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.592653][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.595190][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.601691][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.628018][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.672002][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'. [ 316.775198][ T8256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.799'. [ 317.019436][ T969] usb 5-1: USB disconnect, device number 8 [ 317.424044][ T8274] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 317.519114][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.519200][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.792935][ T5711] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 318.156676][ T5711] usb 3-1: Using ep0 maxpacket: 32 [ 318.160518][ T5711] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 318.160544][ T5711] usb 3-1: config 0 has no interface number 0 [ 318.166574][ T5711] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 318.166605][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.166626][ T5711] usb 3-1: Product: syz [ 318.166640][ T5711] usb 3-1: Manufacturer: syz [ 318.166654][ T5711] usb 3-1: SerialNumber: syz [ 318.318293][ T5711] usb 3-1: config 0 descriptor?? [ 318.340507][ T5711] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 318.340536][ T5711] usb 3-1: selecting invalid altsetting 1 [ 318.340550][ T5711] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 318.345410][ T5711] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 318.345979][ T5711] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 318.346035][ T5711] usb 3-1: media controller created [ 318.422488][ T5711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.786935][ T5610] Bluetooth: hci4: command tx timeout [ 319.845349][ T5711] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 319.845436][ T5711] zl10353_read_register: readreg error (reg=127, ret==-110) [ 320.003807][ T8302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.096604][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 320.269465][ T31] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 320.269494][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.289984][ T5711] usb 3-1: USB disconnect, device number 10 [ 320.309854][ T31] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 320.309887][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.309907][ T31] usb 5-1: Product: syz [ 320.309922][ T31] usb 5-1: Manufacturer: syz [ 320.309936][ T31] usb 5-1: SerialNumber: syz [ 320.344408][ T31] usb 5-1: config 0 descriptor?? [ 320.458352][ T31] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 320.458424][ T31] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 320.827122][ T8295] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 320.866651][ T5610] Bluetooth: hci4: command tx timeout [ 322.946538][ T5610] Bluetooth: hci4: command tx timeout [ 323.011434][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 323.012859][ T31] usb 5-1: USB disconnect, device number 9 [ 323.276986][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 323.279446][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.279479][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.279518][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 323.279542][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.524156][ T10] usb 3-1: config 0 descriptor?? [ 324.539536][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'. [ 324.539562][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'. [ 325.026582][ T5610] Bluetooth: hci4: command tx timeout [ 325.150612][ T10] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 325.150659][ T10] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 325.337555][ T10] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 325.540745][ T10] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 325.954636][ T10] ft260 0003:0403:6030.0001: failed to retrieve status: -71 [ 325.966807][ T10] ft260 0003:0403:6030.0001: failed to reset I2C controller: -71 [ 326.037798][ T10] usb 3-1: USB disconnect, device number 11 [ 327.534291][ T8403] netlink: 'syz.0.848': attribute type 13 has an invalid length. [ 328.268399][ T5610] Bluetooth: hci3: unexpected event for opcode 0xffff [ 330.533014][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 332.876815][ T8468] openvswitch: netlink: Duplicate or invalid key (type 0). [ 332.876850][ T8468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.967148][ T8470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.882'. [ 333.764425][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 333.856679][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 333.930735][ T8497] openvswitch: netlink: Duplicate or invalid key (type 0). [ 333.930769][ T8497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.006642][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 334.028762][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.028797][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.028835][ T31] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 334.028859][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.128724][ T31] usb 5-1: config 0 descriptor?? [ 334.192409][ T8504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.894'. [ 334.392974][ T3416] bridge_slave_1: left allmulticast mode [ 334.393014][ T3416] bridge_slave_1: left promiscuous mode [ 334.393314][ T3416] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.474780][ T5610] Bluetooth: hci0: unexpected event for opcode 0xff3d [ 334.504031][ T3416] bridge_slave_0: left allmulticast mode [ 334.504071][ T3416] bridge_slave_0: left promiscuous mode [ 334.504399][ T3416] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.673606][ T31] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 334.673644][ T31] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 334.777524][ T31] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 334.825433][ T8517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.978416][ T31] ft260 0003:0403:6030.0002: failed to retrieve system status [ 334.978678][ T31] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -32 [ 335.435548][ T8531] openvswitch: netlink: Duplicate or invalid key (type 0). [ 335.435586][ T8531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.643606][ T8536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.905'. [ 335.889640][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 336.671692][ T31] usb 5-1: USB disconnect, device number 10 [ 336.795409][ T8565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.907'. [ 336.894024][ T8567] netlink: 20 bytes leftover after parsing attributes in process `syz.4.919'. [ 337.031361][ T3416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.148726][ T3416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.247250][ T3416] bond0 (unregistering): Released all slaves [ 337.771546][ T8579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.244962][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 338.550678][ T5610] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 338.550981][ T5610] Bluetooth: hci0: Injecting HCI hardware error event [ 338.555158][ T61] Bluetooth: hci0: hardware error 0x00 [ 338.600690][ T3416] hsr_slave_0: left promiscuous mode [ 338.714603][ T3416] hsr_slave_1: left promiscuous mode [ 338.724450][ T3416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.747645][ T3416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.959597][ T5870] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 340.037925][ T3416] team0 (unregistering): Port device team_slave_1 removed [ 340.076513][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 340.103370][ T3416] team0 (unregistering): Port device team_slave_0 removed [ 340.142728][ T5870] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 340.142763][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.142783][ T5870] usb 5-1: Product: syz [ 340.142798][ T5870] usb 5-1: Manufacturer: syz [ 340.142813][ T5870] usb 5-1: SerialNumber: syz [ 340.277151][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 340.279696][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.279731][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.279772][ T31] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 340.279796][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.280773][ T5870] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 340.356993][ T969] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 340.479363][ T31] usb 1-1: config 0 descriptor?? [ 340.706531][ T61] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 341.157771][ T31] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 341.157809][ T31] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 342.127555][ T969] usb 5-1: Service connection timeout for: 258 [ 342.127581][ T969] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 342.506743][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 342.730849][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'. [ 344.129839][ T31] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 345.160806][ T5711] usb 5-1: USB disconnect, device number 11 [ 345.202564][ T969] ath9k_htc[ 345.202564][ T969] ath9k_htc: Failed to initialize the device [ 345.203225][ T31] ft260 0003:0403:6030.0003: failed to retrieve system status [ 345.215889][ T540] ------------[ cut here ]------------ [ 345.215904][ T540] in_task() && kcov_mode_enabled(mode) [ 345.215912][ T540] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#1: kworker/u8:6/540 [ 345.215950][ T540] Modules linked in: [ 345.215970][ T540] CPU: 1 UID: 0 PID: 540 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 345.215992][ T540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 345.216003][ T540] Workqueue: events_unbound cfg80211_wiphy_work [ 345.216026][ T540] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 345.216048][ T540] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 da dc 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 5a ef 57 09 89 c0 48 c7 c7 10 04 6b [ 345.216063][ T540] RSP: 0018:ffffc900048879d8 EFLAGS: 00010202 [ 345.216079][ T540] RAX: 0000000000000002 RBX: ffff888025009ec0 RCX: 0000000000000000 [ 345.216092][ T540] RDX: 0000000000000000 RSI: ffffffff8ba74d40 RDI: ffffffff8ba74d00 [ 345.216105][ T540] RBP: ffff88805d51f780 R08: ffffffff8b1ea760 R09: ffffffff8dfc8140 [ 345.216119][ T540] R10: dffffc0000000000 R11: fffffbfff1f11c3f R12: ffff888037d45dc8 [ 345.216132][ T540] R13: ffff888061f407c0 R14: 0000000000000000 R15: ffff888037d45de0 [ 345.216145][ T540] FS: 0000000000000000(0000) GS:ffff888126279000(0000) knlGS:0000000000000000 [ 345.216159][ T540] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.216173][ T540] CR2: 000020000005c030 CR3: 000000002ae88000 CR4: 00000000003526f0 [ 345.216192][ T540] Call Trace: [ 345.216201][ T540] [ 345.216215][ T540] ieee80211_iface_work+0x211/0x1390 [ 345.216254][ T540] cfg80211_wiphy_work+0x2cf/0x460 [ 345.216284][ T540] ? process_scheduled_works+0xa70/0x1860 [ 345.216373][ T540] process_scheduled_works+0xb5d/0x1860 [ 345.216435][ T540] ? __pfx_process_scheduled_works+0x10/0x10 [ 345.216468][ T540] ? assign_work+0x3d5/0x5e0 [ 345.216497][ T540] worker_thread+0xa53/0xfc0 [ 345.216552][ T540] kthread+0x388/0x470 [ 345.216577][ T540] ? __pfx_worker_thread+0x10/0x10 [ 345.216597][ T540] ? __pfx_kthread+0x10/0x10 [ 345.216624][ T540] ret_from_fork+0x514/0xb70 [ 345.216648][ T540] ? __pfx_ret_from_fork+0x10/0x10 [ 345.216669][ T540] ? __switch_to+0xc79/0x1410 [ 345.216700][ T540] ? __pfx_kthread+0x10/0x10 [ 345.216727][ T540] ret_from_fork_asm+0x1a/0x30 [ 345.216769][ T540] [ 345.216779][ T540] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 345.216793][ T540] CPU: 1 UID: 0 PID: 540 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 345.216813][ T540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 345.216824][ T540] Workqueue: events_unbound cfg80211_wiphy_work [ 345.216845][ T540] Call Trace: [ 345.216852][ T540] [ 345.216860][ T540] vpanic+0x56c/0xa60 [ 345.216883][ T540] ? __pfx__printk+0x10/0x10 [ 345.216909][ T540] ? __pfx_vpanic+0x10/0x10 [ 345.216929][ T540] ? is_bpf_text_address+0x292/0x2b0 [ 345.216953][ T540] ? is_bpf_text_address+0x26/0x2b0 [ 345.216987][ T540] panic+0xc5/0xd0 [ 345.217010][ T540] ? __pfx_panic+0x10/0x10 [ 345.217042][ T540] ? ret_from_fork_asm+0x1a/0x30 [ 345.217071][ T540] __warn+0x315/0x4c0 [ 345.217091][ T540] ? kcov_remote_start+0x5d8/0x710 [ 345.217113][ T540] ? kcov_remote_start+0x5d8/0x710 [ 345.217140][ T540] __report_bug+0x29a/0x540 [ 345.217168][ T540] ? kcov_remote_start+0x5d8/0x710 [ 345.217189][ T540] ? __pfx___report_bug+0x10/0x10 [ 345.217210][ T540] ? do_raw_spin_lock+0x12b/0x2f0 [ 345.217231][ T540] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 345.217271][ T540] ? rt_spin_lock+0x1e0/0x400 [ 345.217298][ T540] ? rt_spin_lock+0x1e0/0x400 [ 345.217325][ T540] ? kcov_remote_start+0x5d8/0x710 [ 345.217345][ T540] report_bug+0x16a/0x220 [ 345.217365][ T540] ? kcov_remote_start+0x5d8/0x710 [ 345.217383][ T540] ? kcov_remote_start+0x5da/0x710 [ 345.217402][ T540] handle_bug+0x9c/0x200 [ 345.217427][ T540] exc_invalid_op+0x1a/0x50 [ 345.217450][ T540] asm_exc_invalid_op+0x1a/0x20 [ 345.217469][ T540] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 345.217490][ T540] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 da dc 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 5a ef 57 09 89 c0 48 c7 c7 10 04 6b [ 345.217504][ T540] RSP: 0018:ffffc900048879d8 EFLAGS: 00010202 [ 345.217518][ T540] RAX: 0000000000000002 RBX: ffff888025009ec0 RCX: 0000000000000000 [ 345.217530][ T540] RDX: 0000000000000000 RSI: ffffffff8ba74d40 RDI: ffffffff8ba74d00 [ 345.217543][ T540] RBP: ffff88805d51f780 R08: ffffffff8b1ea760 R09: ffffffff8dfc8140 [ 345.217555][ T540] R10: dffffc0000000000 R11: fffffbfff1f11c3f R12: ffff888037d45dc8 [ 345.217568][ T540] R13: ffff888061f407c0 R14: 0000000000000000 R15: ffff888037d45de0 [ 345.217589][ T540] ? rt_spin_lock+0x1e0/0x400 [ 345.217622][ T540] ? kcov_remote_start+0xe0/0x710 [ 345.217645][ T540] ieee80211_iface_work+0x211/0x1390 [ 345.217682][ T540] cfg80211_wiphy_work+0x2cf/0x460 [ 345.217703][ T540] ? process_scheduled_works+0xa70/0x1860 [ 345.217726][ T540] process_scheduled_works+0xb5d/0x1860 [ 345.217780][ T540] ? __pfx_process_scheduled_works+0x10/0x10 [ 345.217807][ T540] ? assign_work+0x3d5/0x5e0 [ 345.217834][ T540] worker_thread+0xa53/0xfc0 [ 345.217884][ T540] kthread+0x388/0x470 [ 345.217909][ T540] ? __pfx_worker_thread+0x10/0x10 [ 345.217928][ T540] ? __pfx_kthread+0x10/0x10 [ 345.217954][ T540] ret_from_fork+0x514/0xb70 [ 345.217979][ T540] ? __pfx_ret_from_fork+0x10/0x10 [ 345.218002][ T540] ? __switch_to+0xc79/0x1410 [ 345.218035][ T540] ? __pfx_kthread+0x10/0x10 [ 345.218062][ T540] ret_from_fork_asm+0x1a/0x30 [ 345.218106][ T540] [ 345.218619][ T540] Kernel Offset: disabled